Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/W5Hmap82286bMvYRGfhj5P6hiJY.roa
File: W5Hmap82286bMvYRGfhj5P6hiJY.roa (raw, json)
Hash identifier: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=
Subject key identifier: 5B:91:E6:6A:9F:36:DB:CE:9B:32:F6:11:19:F8:63:E4:FE:A1:88:96
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 019421B1D9AA979E6F52605F67A3F62D8A40
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/W5Hmap82286bMvYRGfhj5P6hiJY.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57121
IP address blocks: 91.230.221.0/24 maxlen: 32
176.96.144.0/21 maxlen: 32
176.96.160.0/20 maxlen: 32
192.109.84.0/23 maxlen: 32
192.109.132.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d9:aa:97:9e:6f:52:60:5f:67:a3:f6:2d:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b91e66a9f36dbce9b32f61119f863e4fea18896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:11:7e:ec:3f:80:84:59:a6:94:58:23:f4:
b3:57:78:a6:ee:06:6a:f0:87:53:5f:c5:f2:e7:63:
84:fe:b1:46:d6:48:ac:11:39:d1:48:65:09:c6:71:
b9:89:9c:c1:2d:c5:b0:b4:6e:77:92:1d:eb:92:df:
3b:e6:cf:a5:09:a0:10:f2:38:88:32:72:8e:79:ef:
8f:c5:9c:e9:79:7b:03:91:ba:55:fe:1f:e0:89:b7:
df:c7:7d:c2:4c:8c:61:48:70:e3:10:91:43:e5:5f:
9f:88:ac:32:12:e7:a6:cc:c8:be:30:96:c5:67:87:
bf:27:91:ad:0a:31:82:b3:88:25:d0:6c:9b:9e:67:
c3:8d:1f:59:76:8f:a5:5b:05:e5:86:c4:f1:6a:d9:
c8:cc:f0:cd:fa:b2:fc:f4:00:14:7a:a4:03:d6:77:
dc:83:b0:8d:75:1c:7d:eb:4e:02:c2:16:32:34:f2:
9d:e0:17:40:a7:5f:c6:84:3a:3f:52:91:75:67:a9:
f0:df:04:0a:cd:9d:42:7c:04:c6:fa:ca:8c:5d:97:
af:fd:3e:d7:9d:4f:08:41:7b:31:18:68:b4:8c:2e:
4e:91:18:40:c7:8b:be:81:78:37:0b:7f:7d:33:a1:
49:d5:08:69:97:3d:1d:8a:29:00:bc:dd:0b:ea:9c:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:E6:6A:9F:36:DB:CE:9B:32:F6:11:19:F8:63:E4:FE:A1:88:96
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/W5Hmap82286bMvYRGfhj5P6hiJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.221.0/24
176.96.144.0/21
176.96.160.0/20
192.109.84.0/23
192.109.132.0/23
Signature Algorithm: sha256WithRSAEncryption
82:b7:bb:6f:e8:63:22:79:90:3c:82:29:0e:a0:20:91:14:0b:
f3:e7:cb:3c:ba:67:92:ec:f1:69:36:52:72:8e:e7:78:13:b6:
04:e5:e1:77:ae:3f:11:4b:05:11:89:7b:d2:5e:44:48:69:af:
ce:17:ed:e3:19:ab:43:a3:b7:d0:81:b7:88:7b:b0:46:b3:89:
f3:eb:45:06:bf:f8:fc:20:b9:49:96:2e:cc:ac:ea:7a:04:b6:
d0:37:1d:83:c9:2d:58:06:9e:fa:b6:b3:08:84:90:21:17:d4:
ff:2f:de:07:e6:c2:2e:fe:5f:c9:45:ed:27:a7:fe:9d:78:4d:
78:fa:22:7e:2f:3d:89:6c:fc:27:c7:6a:2f:8c:2a:de:65:db:
c2:1e:78:05:73:4e:2a:da:24:ed:05:68:06:9a:9a:36:b3:65:
70:7f:2d:46:74:68:0a:d2:11:84:60:3f:97:56:13:1a:55:02:
ae:1c:3c:a8:7a:e4:3c:e3:db:ff:55:2a:29:e9:d3:7e:f7:c6:
cc:d7:7f:54:51:93:a7:2b:a9:85:e8:36:f7:22:80:28:82:c8:
a0:cd:99:1a:b9:a4:9c:6d:f2:7b:55:2f:91:11:41:c2:ac:4e:
43:e7:30:15:4a:29:0e:64:5a:dc:f5:86:78:0b:38:3c:c3:39:
d0:25:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:36 2025 by rpki-client